CVE Vulnerabilities

CVE-2003-0765

Published: Sep 17, 2003 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large Track data size value.

Affected Software

NameVendorStart VersionEnd Version
WinampNullsoft2.81 (including)2.81 (including)
WinampNullsoft2.91 (including)2.91 (including)
WinampNullsoft3.0 (including)3.0 (including)
WinampNullsoft3.1 (including)3.1 (including)

References